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IN THE CLAIMS : 

Please amend the claims as indicated below., 

1 ., (Cmi ently Amended) A method for evaluating a password proposed by a user dining an 

emoUment piocess. comprising: 

receiving said proposed password fiom said user; and 

ensur ing that a correlation botwcen said user cannot be correlated with m d said pr oposed 
password does not violate based on one or more predefined correlation rules 

2. (Original) The method of claim 1 , wherein said one or more predefined correlation rules 

evaluate whether that said proposed password can be qualitatively correlated with said user ., 

3 ,. (Oi iginal) T he method of claim 1 , wherein said one or more predefined correlation rules 

evaluate whether said proposed password can be quantitatively correlated with said user., 

4 (Original) The method of claim 1, wherein said proposed password is comprised of a 

proposed answer and a proposed hint and wher'ein said one or more predefined correlation rules evaluate 
whether said proposed answer can be correlated with said proposed hint in a particular relation.. 

5., (Original) The method of claim 4, wherein said particular relation is selected fiom the 

group consisting essentially of: self, family member, co-author, teammate, colleague^ neighbor, 
commuirity member' or household member . 

6, (Original) The method of claim 1, wherein said proposed password is comprised of a 

pr oposed answer and a pr oposed hint and wher ein said one or more predefined correlation rules evaluate 
whether said proposed answer can be obtained fiom said proposed hint., 

7 . (Original) The method of claim 1, wherein said proposed password is an identifying 

number. 
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8. (Original) The method of claim 7, wheiein said one oi more piedefined coiielation lules 
evaluate whethei said identifying numbei identifies a peison in a paiticulai lelationship to said usei 

9 . (Original) The method of claim 7, wheiein said one oi more predefined coiielation lules 
evaluate whethei said identifying number is a top N most commonly used identifying numbei., 

1 0.. (Oiiginal) The method of claim 7, wheiein said one oi- more piedefined coiielation rules 

evaluate whethei said identifying numbei identifies a top N commercial entity. 

1 1 . (Oiiginal) The method of claim 7, wherein said one oi moie piedefined coiielation lules 

evaluate whethei said identifying numbei identifies said usei, . 

12 (Original) The method of claim 7, wheiein said identifying numbei is a poition of a 

telephone numbei . 

13 , (Original) The method of claim 7, wheiein said identifying numbei is a poition of an 
addiess. 

1 4 , (Original) The method of claim 7, wheiein said identifying number is a poition of social 
secuiity numbei . 

1 5, (Oiiginal) The method of claim 1 , wheiein said proposed passwoid is a word. 

1 6 , (Oiiginal) The method of claim 1 5, whei ein said one oi moie piedefhied coiielation lules 
evaluate whethei a coiielation between said woid and said user exceeds a piedefined thieshold 

17, (Oiiginal) The method of claim 1, wheiein said coiielation is deteimined by peifoiming a 
meta-seaich.. 

18 . (Original) The method of claim 1, wheiein said step of ensuiing a coiielation fuithei 

comprises the step of peifoiming ameta-seaich. 
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19. (Oiiginal) The method of claim 1, wherein said step of ensming a conelation fliithei 
compiises the step of peifoiming a local pioximity evaluation,. 

20. (Onginal) The method of claim 1, wheiein said step of ensming a conelation fuither 
compiises the step of peifoiming a number classification. 

2 1 ., (Cut! ently Amended) An appaiatus for- evaluating a passwoxd proposed by a usei duiing 

an eniollment process, comprising: 
a memory; and 

at least one processor, coupled to the memoiy, operative to: 
receive said proposed password from said user; and 

ensme that e valuate wheth e r a correlation between said user carmot be coiielated with 
^ad said proposed password violates based on one or more predefined correlation rules. 

22 . (Original) The appaiatus of claim 21 , wherein said one or- more predefined correlation 
rules evaluate whether said proposed password can be correlated with said user . 

23 . (Original) The appar atus of claim 2 1 , wherein said proposed password is comprised of a 
pr oposed answer' and a proposed hint and wherein said one or more predefined correlation rules evaluate 
whether said proposed answer can be correlated with said proposed hint in a paiticular relation, 

24,. (Original) The appaiatus of claim 21, wherein said pr oposed password is comprised of a 

proposed answer and a proposed hint and wherein said one or more predefined correlation rules evaluate 
whether said proposed answer can be obtained from said proposed hint.. 

25. (Original) The appaiatus of claim 2 1 , wher ein said pr oposed passwor d is an identifying 
number'. 

26 . (Original) The appaiatus of claim 25, wherein said one or more predefined conelation 
rules evaluate whether said identifying number identifies a person in a particular relationship to said 
user. 
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27 (Cmi ently Amended) An aiticle of manuf actui e foi' evaluating a passwoid pmposed by a 

usei dming an emollment ptocess , compiising a machine leadable medium containing one oi moie 

piogiams which when executed implement the steps of: 

receive receiving said pioposed passwoid fiom said usei"; and 

ensmii^ that evaluate whether a correlation between said user cannot be coiielated with 

aad said pioposed passwoid violates based on one oi" moie predefined coiielation rules, 



